CVE-2023-0658: Multilaser RE057/RE170 Backup File param.file.tgz information disclosure

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-03 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VDB-220053 was assigned to this vulnerability.

Affected products

Multilaser Re057 Firmware: 2.1, 2.2
Multilaser Re170 Firmware: 2.1, 2.2

References

https://vuldb.com/?ctiid.220053
https://vuldb.com/?id.220053
https://vuldb.com/?ctiid.220053
https://vuldb.com/?id.220053

Get alerted when CVE-2023-0658 or the next vulnerability affects your stack